i want access any pc from range to any pc in range other

RouterOS General
1

Hello Everyone …

please help me …

I have two floors in a building , also two router in each floor , also two range in each router

i want access any pc from range 10.1.10/24 to any pc in range 10.1.2.0/24 ( access folders and printers shared ) sample :

pc 10.1.1.5 ----> switch in floor 1 ----> mikrotik port 8 in floor 1 ----> mikrotik port 6 in floor 1 ----> to ----> mikrotik port 6 in floor 2 ----> mikrotik port 8 in floor 2 ----> switch in floor 2 ----> folder in pc 10.1.2.5 or pc 10.1.2.6 or pc 10.1.2.7

The opposite is also true .

traffic from :
mikrotik port 6 in floor 1 ----> to ----> mikrotik port 6 in floor 2
or
mikrotik port 6 in floor 2 ----> to ----> mikrotik port 6 in floor 1
by crossover cable and ip sample 172.1.10/24 or any range ip

access sample local area network

Thank you all…
mikrotik.jpg

2

Hello,

I don’t mean to be rude but it’s called basic routing and switching. Nothing more.

Your setup is basic and straightforward.

Again, with all due respect, you don’t need help, you need training.

Sent from Tapatalk

3

Yup, like the previous poster said based on your drawing it’s pretty straight forward.

You can use static routing to keep things simple. The commands would look like:

Left Cloud Core Router

/ip route add disabled=no dst-address=10.1.1.0/24 gateway=172.1.1.1

Right Cloud Core Router

/ip route add disabled=no dst-address=10.1.2.0/24 gateway=172.1.1.2

The switch will route the traffic before it NATs it.

4

Hello

no problem AlainCasault , I have experience, but a lot of work can not focus and think

idlemind Thank you very much for your response , But it shows me " Time Out "

i used this :

https://wiki.mikrotik.com/wiki/Manual:Simple_Static_Routing

But also shows me " Time Out " :confused: :open_mouth: :open_mouth:

5

Silly question, but do you have a default gateway defined in all DHCP servers??

Sent from Tapatalk

6

And often enough… Personal firewall >:(

Sent from Tapatalk

7

Unbelievable how many times that little obstacle gets us [SMILING FACE WITH OPEN MOUTH]

Sent from Tapatalk

8

Finally, from your pc, see how far you can ping before it fails.
Same thing from each routers.

Sent from Tapatalk

9

Thank you very much for your cooperation AlainCasault …

any pc from range 10.1.2.0/24 can you access and ping to pc 172.1.1.1

but pc 172.1.1.1 can’t you access and ping to any pc from range 10.1.2.0/24

Also all devices are disabled firewall
mikrotik1.jpg

10

From ccr, ping 10.1.2.x using src-address 172.1.1.2.
That should tell you where the problem lies.
Its hard for us to troubleshoot through a forum. Good luck!

Sent from Tapatalk

11

Thank you very much…

////////////////////////////////////////////////////////////////////// router right //////////////////////////////////////////////////////////////////////
/interface ethernet
set [ find default-name=ether1 ] comment=ether1 l2mtu=1588 name=ISP1
set [ find default-name=ether2 ] comment=ether2 l2mtu=1588 name=ISP2
set [ find default-name=ether3 ] comment=ether3 l2mtu=1588 name=ISP3
set [ find default-name=ether4 ] comment=ether4 l2mtu=1588 name=ISP4
set [ find default-name=ether5 ] comment=ether5 l2mtu=1590 name=ISP5
set [ find default-name=ether6 ] comment=ether6 l2mtu=1590 name=ISP6
set [ find default-name=ether7 ] comment=ether7 l2mtu=1590 name=ISP7
set [ find default-name=ether8 ] comment=ether8 l2mtu=1590 name=OUT

/ip pool
add name=Pool ranges=10.1.1.2-10.1.1.250

/ip dhcp-server
add address-pool=Pool always-broadcast=yes interface=OUT lease-time=1d name=dhcp1

/ip address
add address=192.168.1.2/24 interface=ISP1 network=192.168.1.0
add address=192.168.2.2/24 interface=ISP2 network=192.168.2.0
add address=172.1.1.2/24 interface=ISP6 network=172.1.1.0 ***
add address=10.1.1.1/24 interface=OUT network=10.1.1.0 ***

/ip dhcp-server network
add address=10.1.1.0/24 dns-server=10.1.1.1 gateway=10.1.1.1 netmask=24

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

/ip firewall nat
add action=masquerade chain=srcnat src-address=10.1.1.0/24

/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=to_ISP1
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to_ISP2
add check-gateway=ping distance=1 gateway=172.1.1.254 routing-mark=to_ISP6 ***
add check-gateway=ping distance=1 gateway=192.168.1.1
add check-gateway=ping distance=2 gateway=192.168.2.1
add check-gateway=ping distance=3 gateway=172.1.1.254 ***

add check-gateway=ping distance=1 gateway=172.1.1.3 dst-address=10.1.2.0/24 ***
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////


////////////////////////////////////////////////////////////////////// router left //////////////////////////////////////////////////////////////////////
/interface ethernet
set [ find default-name=ether1 ] comment=ether1 l2mtu=1588 name=ISP1
set [ find default-name=ether2 ] comment=ether2 l2mtu=1588 name=ISP2
set [ find default-name=ether3 ] comment=ether3 l2mtu=1588 name=ISP3
set [ find default-name=ether4 ] comment=ether4 l2mtu=1588 name=ISP4
set [ find default-name=ether5 ] comment=ether5 l2mtu=1590 name=ISP5
set [ find default-name=ether6 ] comment=ether6 l2mtu=1590 name=ISP6
set [ find default-name=ether7 ] comment=ether7 l2mtu=1590 name=ISP7
set [ find default-name=ether8 ] comment=ether8 l2mtu=1590 name=OUT

/ip pool
add name=Pool ranges=10.1.2.2-10.1.2.250

/ip dhcp-server
add address-pool=Pool always-broadcast=yes interface=OUT lease-time=1d name=dhcp1

/ip address
add address=192.168.1.2/24 interface=ISP1 network=192.168.1.0
add address=192.168.2.2/24 interface=ISP2 network=192.168.2.0
add address=172.1.1.3/24 interface=ISP6 network=172.1.1.0 ***
add address=10.1.2.1/24 interface=OUT network=10.1.2.0 ***

/ip dhcp-server network
add address=10.1.2.0/24 dns-server=10.1.2.1 gateway=10.1.2.1 netmask=24

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

/ip firewall nat
add action=masquerade chain=srcnat src-address=10.1.2.0/24

/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=to_ISP1
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to_ISP2
add check-gateway=ping distance=1 gateway=172.1.1.254 routing-mark=to_ISP6 ***
add check-gateway=ping distance=1 gateway=192.168.1.1
add check-gateway=ping distance=2 gateway=192.168.2.1
add check-gateway=ping distance=3 gateway=172.1.1.254 ***

add check-gateway=ping distance=1 gateway=172.1.1.2 dst-address=10.1.1.0/24 ***
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

12

rtfnon, may I suggest a GNS3 lab to troubleshoot your problem? It may give you the safe environment to test and learn as well as see the commands that are required to get this working for you.

Side-note. Don’t use 172.1.1.0/24 as it is allocated to ATT unless they’ve given you permission (https://whois.arin.net/rest/net/NET-172-0-0-0-1). Use 172.16.0.0/12 if you want to use RFC1918, private, addresses with a 172 first octect.
MikroTik Forum_Basic Static Routing_1.png
Commands to make it work are:

lpc1

ip 10.1.2.41 255.255.255.0 10.1.2.1

rpc1

ip 10.1.1.41 255.255.255.0 10.1.1.1

left1

ip address add address=172.16.1.2/24 interface=ether4
ip address add address=10.1.2.1/24 interface=ether1
ip route add dst-address=10.1.1.0/24 gateway=172.16.1.1

right1

ip address add address=172.16.1.1/24 interface=ether4
ip address add address=10.1.1.1/24 interface=ether1
ip route add dst-address=10.1.2.0/24 gateway=172.16.1.2

Link to GNS3 lab file shown here: https://www.dropbox.com/s/7deawkc9la3suz2/MikroTik%20Forums%20Basic%20Static%20Routing.gns3project?dl=0

Basic Static Routing video from CCENT course (maybe watch the whole series): https://www.youtube.com/watch?v=4_8QoZcblGU

13

Thanks for posting the configurations. Really should be a first step :slight_smile:

It shows you have no route to the networks. You never added the static routes we’ve been telling you to add.

Second, your drawing is incorrect. The 172.1.1.0/24 IPs are .2 and .3 not .2 and .1.

So for your particular environment based on the configs just posted.

router - left

/ip route add dst-address=10.1.1.0/24 gateway=172.1.1.2

router - right

/ip route add dst-address=10.1.2.0/24 gateway=172.1.1.3
14

I’m very embarrassed by you
I wear you so much
I am very sorry

( You never added the static routes we’ve been telling you to add.) Dear I did not understand what you mean here ?


this new configuration from this video :
https://www.youtube.com/watch?v=PtKsssg63-A

any pc from router right can you ping to 10.0.0.2 and ip router left 192.168.2.1 … but not ping to any pc 192.168.2.x
also
any pc from router left can you ping to 10.0.0.1 and ip router right 192.168.1.1 … but not ping to any pc 192.168.1.x

!!! :frowning: :confused: :open_mouth:

please can you help me

thank you idlemind and AlainCasault

////////////////////////////////////////////////////////////////////// router right //////////////////////////////////////////////////////////////////////
/interface ethernet
set [ find default-name=ether1 ] comment=ether1 l2mtu=1588 name=ISP1
set [ find default-name=ether2 ] comment=ether2 l2mtu=1588 name=ISP2
set [ find default-name=ether3 ] comment=ether3 l2mtu=1588 name=ISP3
set [ find default-name=ether4 ] comment=ether4 l2mtu=1588 name=ISP4
set [ find default-name=ether5 ] comment=ether5 l2mtu=1590 name=ISP5
set [ find default-name=ether6 ] comment=ether6 l2mtu=1590 name=ISP6
set [ find default-name=ether7 ] comment=ether7 l2mtu=1590 name=OUT1

/ip pool
add name=Pool ranges=192.168.1.2-192.168.1.250

/ip dhcp-server
add address-pool=Pool always-broadcast=yes disabled=no interface=OUT1 lease-time=1d name=dhcp1

/ip address
add address=10.0.0.1/8 interface=ISP6 network=10.0.0.0
add address=192.168.1.1/24 interface=OUT1 network=192.168.1.0

/ip dhcp-server network
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1 netmask=24

/ip dns
set allow-remote-requests=yes cache-max-ttl=0s servers=192.168.1.1,8.8.8.8,8.8.4.4

/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.1.0/24

/ip route
add check-gateway=ping distance=1 dst-address=192.168.2.0/24 gateway=10.0.0.2

/system identity
set name=MikroTik1

////////////////////////////////////////////////////////////////////// router left //////////////////////////////////////////////////////////////////////

/interface ethernet
set [ find default-name=ether1 ] comment=ether1 l2mtu=1588 name=ISP1
set [ find default-name=ether2 ] comment=ether2 l2mtu=1588 name=ISP2
set [ find default-name=ether3 ] comment=ether3 l2mtu=1588 name=ISP3
set [ find default-name=ether4 ] comment=ether4 l2mtu=1588 name=ISP4
set [ find default-name=ether5 ] comment=ether5 l2mtu=1590 name=ISP5
set [ find default-name=ether6 ] comment=ether6 l2mtu=1590 name=ISP6
set [ find default-name=ether7 ] comment=ether7 l2mtu=1590 name=OUT1

/ip pool
add name=Pool ranges=192.168.2.2-192.168.2.250

/ip dhcp-server
add address-pool=Pool always-broadcast=yes disabled=no interface=OUT1 lease-time=1m name=dhcp1

/ip address
add address=10.0.0.2/8 interface=ISP6 network=10.0.0.0
add address=192.168.2.1/24 interface=OUT1 network=192.168.2.0

/ip dhcp-server network
add address=192.168.2.0/24 dns-server=192.168.2.1 gateway=192.168.2.1 netmask=24

/ip dns
set allow-remote-requests=yes cache-max-ttl=0s servers=192.168.2.1,8.8.8.8,8.8.4.4

/ip firewall nat
add action=masquerade chain=srcnat disabled=yes src-address=192.168.2.0/24

/ip route
add check-gateway=ping distance=1 dst-address=192.168.1.0/24 gateway=10.0.0.1

/system identity
set name=MikroTik2

15

Still didn’t add the routes…

16

Dude, seriously! This is so basic. I understand you have a lot of work, but you have a defective network. Take a break, regroup and go through the basic troubleshooting steps. I took you what to do. Others told you what to do. What gives??

Sent from Tapatalk

17

Please, Mr. idlemind, where is the problem?
Can you explain more
I did not understand what you mean

aaaaahhhhhhhhhhh !!! :confused:


any pc from router right can you ping to 10.0.0.2 and ip router left 192.168.2.1 … but not ping to any pc 192.168.2.x
also
any pc from router left can you ping to 10.0.0.1 and ip router right 192.168.1.1 … but not ping to any pc 192.168.1.x

!!! :frowning::?:shock:

18

Your network topology has now changed … What are you really trying to do?

Also, is English your native language? If not maybe someone on the forum could help translate to your native language or point you to resources in your native language that may help you better understand.

19

Hello dear

yes dear , I changed the network topology , Just to illustrate the idea
But there is no difference between them network topology old or new

I speak a little English
I use translate google

only i want access any pc from any range from any router ( access folders and printers shared )

20

What’s your native language? Have you tried using the MikroTik CHR images in GNS3 to learn?